reactxss icon indicating copy to clipboard operation
reactxss copied to clipboard

An XSS smoke test for ReactJS

Modernised Edition

Now builds with Webpack, and compiles under Typescript.

The only configured build is a React development build. Since this is not a production tool, this is intended.

Deployment and test

Share the dist/ directory utilising any popular web server. To build the latest exploit list:

wget https://www.owasp.org/index.php/XSS_Filter_Evasion_Cheat_Sheet
./extract.rb > dist/sploits.json

To build the javascript:

npm install
webpack 

Deployment to my server:

npm run deploy

More information

See this blog post:

https://lolware.net/2015/08/19/reactjs-xss-testing.html